← All credits
Lorenzo Gallegos
18 vulnerability records and advisories credit this contributor.
CVE-2026-2299
Improper Access Control in Mattermost Google Drive Plugin File Creation Endpoint
CVE-2026-2325
Improper Input Validation in MS Teams Meetings API Handler
CVE-2026-21388
Unbounded Request Body Read in MS Teams Plugin {{/lifecycle}} Webhook Endpoint
CVE-2026-24661
Unbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook Endpoint
CVE-2025-8285
Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin
CVE-2025-54525
Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
CVE-2025-54478
Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin
CVE-2025-54463
Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin
CVE-2025-54458
Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin
CVE-2025-53910
Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin